Alert GCSA-07130 Vulnerabilita' in Mozilla Thunderbird 1.5.0.x

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


************************************************************************

    Alert ID : GCSA-07130
        Data : 21 Dicembre 2007
      Titolo : Vulnerabilita' in Mozilla Thunderbird 1.5.0.x

************************************************************************

:: Descrizione del problema

    E' stata rilasciata una nuova versione di Mozilla Thunderbird
    serie 1.5.0.x, per risolvere due vulnerabilita'.


:: Software interessato

    Mozilla Thunderbird versioni precedenti alla 1.5.0.14


:: Impatto

    Denial of Service
    Accesso al sistema


:: Soluzione

    Aggiornare alla versione 1.5.0.14
    http://www.mozilla.com/en-US/thunderbird/releases/1.5.0.14.html


:: Riferimenti

    Mozilla Foundation Security Advisories

    http://www.mozilla.org/projects/security/known-vulnerabilities.html#thunderbird1.5.0.14
    http://www.mozilla.org/security/announce/2007/mfsa2007-29.html
    http://www.mozilla.org/security/announce/2007/mfsa2007-40.html
    http://www.mozilla.org/security/announce/

    Securityfocus Bugtraq ID
    http://www.securityfocus.com/bid/26132
    http://www.securityfocus.com/bid/24837

    Secunia
    http://secunia.com/advisories/28179/
    http://secunia.com/advisories/27313/

    FrSirt
    http://www.frsirt.com/english/advisories/2007/4272

    Mitre's CVE ID
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3670
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5339
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5340


-----BEGIN PGP SIGNATURE-----

iQCVAwUBR2vO3/OB+SpikaiRAQKzrAP9H92ph6t9XTW87wxPD0sS5zJ8Zm4SU7l/
GeJSWughaFgYQoxu8TmZGSE/4yBsoihO+0z8oauF2Yn4hpJ2uBraiciUt9AweKnD
JeApBlpY0UcHo4lhY3DeodAI8SZNw1a6a7QEZWZL/TtKatOH7otRRfolff72K4h+
j0DMAVm3cmE=
=Epak
-----END PGP SIGNATURE-----